DATA PROTECTION DECLARATION FROM SOLARWATERWORLD AG

1. Name and contact details of the person responsible for processing and the company data protection officer

This data protection information applies to data processing by:

Verantwortlicher:
Solarwaterworld AG
Schlesische Str. 28
10997 Berlin
Email: solarbootverleih@solarwaterworld.de
Phone: 0151 74 55 44 33

The company data protection officer of Solarwaterworld AG can be reached at the above address, to the attention of Mr. Tim Schultze, or at solarbootverleih@solarwaterworld.de.

2. Collection and storage of personal data as well as the type and purpose of their use

a) When visiting the website

BWhen you visit our website www.solarwaterworld.de, the browser used on your device automatically sends information to the server on our website. This information is temporarily stored in a so-called log file. The following information is recorded without any action on your part and stored until it is automatically deleted:

IP address of the requesting computer, date and time of access, name and URL of the retrieved file, website from which access is made (referrer URL), browser used and, if applicable, the operating system of your computer and the name of your access provider.

The data mentioned will be processed by us for the following purposes:

Ensuring a smooth connection to the website, ensuring comfortable use of our website, evaluating system security and stability and for other administrative purposes. The legal basis for data processing is Art. 6 Para. 1 S. 1 lit.f GDPR. Our legitimate interest follows from the data collection purposes listed above. Under no circumstances do we use the data collected for the purpose of drawing conclusions about you personally.

5. Rental property

The landlord ensures that the customer is given an operationally safe and functional charter boat. If malfunctions or damage occur during the rental period, the lessor must ensure that malfunctions that impair the operability of the boat are rectified without culpable delay. If the landlord repairs the reported damage without culpable delay, the customer has no right to a reduction in the rental price. If the lessor cannot make the rented boat available to the customer for reasons for which he is not responsible, he is entitled to hand over a boat of the same value or to refund the entire rental price. Any additional compensation services are excluded.

In addition, we use cookies and analysis services when you visit our website. You will find more detailed explanations under Sections 4 and 5 of this data protection declaration.

b) When using our contact form

If you have any questions, we offer you the opportunity to contact us using a form provided on the website. It is necessary to provide a valid email address, first name and surname so that we know who sent the request and to be able to answer it.

The data processing for the purpose of contacting us takes place in accordance with Art. 6 Para. 1 S. 1 lit. a GDPR on the basis of your voluntarily given consent.

The personal data collected by us for the use of the contact form will be deleted after your request has been dealt with. The data will be forwarded to the email address solarbootverleih@solarwaterworld.de when the contact form is sent and will not be saved on the site.

After the end of the project, the data will be deleted.

3. Transfer of data

A transfer of your personal data to third parties for purposes other than those listed below does not take place

We only pass on your personal data to third parties if:

You have given your express consent in accordance with Art. 6 Para. 1 S. 1 lit. There is reason to assume that you have an overriding legitimate interest in not disclosing your data in the event that there is a legal obligation for the disclosure in accordance with Art. 6 Paragraph 1 Clause 1 lit. according to Art. 6 Para. 1 S. 1 lit. b GDPR for the processing of contractual relationships with you.

4. Cookies

We use cookies on our website. These are small files that your browser automatically first. llt and which are stored on your device (laptop, tablet, smartphone, etc.) when you visit our site. Cookies do not cause any damage to your device and do not contain any viruses, Trojans or other malware.

Information is stored in the cookie that results in connection with the specific device used. However, this does not mean that we are immediately aware of your identity.

The use of cookies serves on the one hand to make the use of our offer more pleasant for you. We use so-called session cookies to recognize that you have already visited individual pages on our website. These are automatically deleted after you leave our website.

In addition, we use temporary cookies to optimize user-friendliness, which are stored on your device for a specific period of time. The language cookie used differentiates the language in which the page should be displayed.

The data processed by cookies are required for the purposes mentioned to safeguard our legitimate interests and those of third parties in accordance with Art. 6 Para. 1 S. 1 lit.f GDPR.

Most browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer or a message always appears before a new cookie is created. However, if you completely deactivate cookies, you may not be able to use all the functions of our website.

5. Rights of data subjects
You have the right:

to request information about your personal data processed by us in accordance with Art. 15 GDPR . In particular, you can obtain information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to correction, deletion, restriction of processing or objection, the existence of a The right to lodge a complaint, the origin of your data, if we have not collected it, as well as the existence of automated decision-making including profiling and, if necessary, meaningful information on their details;

in accordance with Art. 16 GDPR to immediately request the correction of incorrect personal data or the completion of your personal data stored by us; in accordance with Art. 17 GDPR, to request the deletion of your personal data stored by us, unless the processing is to exercise the right to freedom of expression and information, is necessary to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;

In accordance with Art. 18 GDPR, to demand the restriction of the processing of your personal data if you dispute the correctness of the data, the processing is unlawful, but you refuse to delete it and we no longer need the data, but you need it to assert or exercise it or need the defense of legal claims or you have objected to the processing in accordance with Art. 21 GDPR;

in accordance with Art. 20 GDPR , to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request that it be transmitted to another person responsible to revoke your consent given to us at any time in accordance with Art. 7 para. As a result, we are no longer allowed to continue the data processing based on this consent in the future and to complain to a supervisory authority in accordance with Art. 77 GDPR. As a rule, you can contact the supervisory authority of your usual place of residence or work or our office.

6. Right to Object

If your personal data are processed on the basis of legitimate interests in accordance with Art. 6 Para. 1 S. 1 lit.f GDPR, you have the right to object to the processing of your personal data in accordance with Art. which arise from your particular situation or the objection is directed against direct mail. In the latter case, you have a general right of objection, which we will implement without specifying a particular situation.

If you would like to make use of your right of revocation or objection, an email to: solarbootverleih@solarwaterworld.de is sufficient
7. Data security

We use the widespread SSL (Secure Socket Layer) method in conjunction with the highest level of encryption supported by your browser when you visit our website. As a rule, this is a 256-bit encryption.

You can tell whether an individual page of our website is transmitted in encrypted form by the closed key or lock symbol in the lower status bar of your browser.

8. Up-to-dateness and changes to this data protection declaration

This data protection declaration is currently valid and was last updated in January 2019.

Due to the further development of our website and offers on it or due to changed legal or official requirements, it may be necessary to change this data protection declaration. You can call up and print out the current data protection declaration at any time on the website at https://www.solarwaterworld.de/datenschutzerklaerung.

DATA PROTECTION DECLARATION FOR END CUSTOMERS
DATA PROTECTION DECLARATION, MAY 24, 2018
Preamble

With this data protection declaration we would like to inform you about how we process personal data. We are aware of the importance of the processing of personal data for the user and accordingly observe all relevant legal requirements. The protection of your privacy is of the highest importance to us. Therefore, compliance with the statutory data protection regulations is a matter of course for us.

1. Contact
bookingkit GmbH, represented by the managing directors Christoph Kruse and Lukas CC Hempel

Data protection department
Sonnenallee 223
12059 Berlin

Or datenschutz@bookingkit.de

2. Data protection officer
We have appointed ePrivacy GmbH, represented by Professor Dr. Christoph Bauer

Große Bleichen 21
20354 Hamburg

You can reach our data protection officer at datenschutz@eprivacy.eu

3. Personal data

Personal data is all information about the personal and factual circumstances of a specific or identifiable person. This includes information and details such as your name, your address or other postal address, the telephone number or your e-mail address.

We save the following data:

Name, address, date of birth, email address, cookies, time stamp, payment method, payment data for direct debit

5. Legal basis
The processing of your data takes place on the following legal bases:

- With regard to services that you use to carry out a contract with you, Art. 6 Para. 1 lit. b) GDPR
- To fulfill legal obligations, Art. 6 Para. 1 lit. c) GDPR
- otherwise , in particular for statistical data and online identifiers, based on legitimate interests, Art. 6 Para. 1 lit.f) GDPR (see below)

6. Legitimate Interests
When processing your data, we pursue the following legitimate interests:

- Improvement of our offer
- Analysis of the behavior of users on the website (user data is not personalized, IP addresses are anonymized) to improve the user experience on the website and the acquisition of new customers
- Protection against misuse

6. Data sources

We receive the data described above from you when you enter them to complete a booking. In addition, we receive technical data such as cookies and a time stamp from your browser.

7. Data transfer to third countries

Data is transferred to third countries outside the European Union. This is done on the basis of statutory contractual provisions that are intended to ensure adequate protection of your data and which you can view on request.

8. Duration of storage
We save your data:

- if you have consented to the processing, at most until you revoke your consent,
- if we need the data to execute a contract, at most as long as the contractual relationship with you exists or statutory retention periods run,
- if we have the data on the basis of a legitimate interest, at most as long as your interest in deletion or anonymization does not outweigh.

9. Uses

We only collect personal data to the extent and for the purpose for which you provided the data to us, e.g. B. make available as part of a booking.

10. Data backup

We have taken extensive technical and organizational measures to protect your data against possible dangers such as unauthorized access, unauthorized knowledge, modification or distribution, as well as against loss, destruction or misuse.

In order to protect your personal data from unauthorized access by third parties during transmission, we secure the data transmission using SSL encryption, if necessary. It is a standardized encryption method for online services, especially for the web.

11. Cookies

Cookies are small files that your browser stores on your device in a directory provided for this purpose. These cookies can be used, for example, to determine whether you have already visited a website. Most browsers accept cookies automatically. However, you can set your browser in such a way that no cookies are saved or that explicit consent is required before saving a cookie. You can also delete cookies that have already been set at any time. Please note that deactivating cookies may restrict the use of our website.

We use cookies during the ordering process that ensure that the information from the previous step is saved in each step of the process. In addition, while we are testing different versions of our ordering process, we store which version you have seen, for example in order to be able to make statements about which ordering process is preferred by the end customer.

12. Web analysis

Like almost every website operator, we use analysis tools in the form of tracking software to determine the frequency of use and the number of users of our website.

In order to be able to optimize this website and our offer, we use Google Analytics, a web analysis service from Google Inc. (“Google”). Google Analytics uses so-called "cookies", text files that are stored on your computer and that enable your use of the website to be analyzed. The information generated by the cookie about your use of this website (including your IP address) will be transmitted to and stored by Google on servers in the United States. If IP anonymization is activated on this website, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. The full IP address will only be sent to a Google server in the USA and shortened there in exceptional cases. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity for the website operator and to provide the website operator with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. You can prevent the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent.

You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by clicking the following link tools.google.com / dlpage / gaoptout? hl = de download and install the available browser plug-in. As an alternative to the browser add-on or within browsers on mobile devices, please click this link to prevent Google Analytics from collecting data on this website in the future (the opt-out only works in this browser and only for this domain). An opt-out cookie will be stored on your device. If you delete your cookies in this browser, you will have to click this link again. You can find more information on this at tools.google.com/dlpage/gaoptout?hl=de or

13. Third Party Services
We do not pass on personal data to third parties. This does not apply to the service partners of bookingkit GmbH, who require the transmission of data for order processing:
MANGOPAY SA

The MANGOPAY service is provided by MANGOPAY SA. With all payment methods (excluding PayPal) you will be forwarded to the MANGOPAY website via a link. For the use of this service, MANGOPAY collects, stores and processes your personal data such as your name, your address, your telephone number and your e-mail address as well as your credit card or bank account details. MANGOPAY is solely responsible for the protection and handling of the data collected by MANGOPAY. In this respect, the MANGOPAY terms of use apply, which you can access at www.mangopay.com. Further information on how your data is handled can be found in MANGOPAY's data protection declaration, which can be accessed at the following link: www.mangopay.com

MANGOPAY SA
10 boulevard Royal
L-2449 Luxembourg

The Rocket Sciense Group, LLC (Mailchimp)

The automated email communication is sent via “MailChimp”, a newsletter distribution platform from the US provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE # 5000, Atlanta, GA 30308, USA. The email addresses of our customers and their names are stored on MailChimp's servers in the USA. MailChimp uses this information to send and evaluate automated email communication on our behalf. Furthermore, according to its own information, MailChimp can use this data to optimize or improve its own services, e.g. for the technical optimization of the dispatch and the presentation of the newsletter or for economic purposes in order to determine from which countries the recipients come. However, MailChimp does not use the data of our newsletter recipients,

We trust in the reliability and IT and data security of MailChimp. MailChimp is certified under the US-EU data protection agreement "Privacy Shield" and is committed to complying with EU data protection regulations. We have also concluded a “Data Processing Agreement” with MailChimp. This is a contract in which MailChimp undertakes to protect the data of our users, to process it on our behalf in accordance with its data protection regulations and, in particular, not to pass it on to third parties. You can view MailChimp's data protection regulations here.

Amazon Web Services (AWS)

All bookingkit services are hosted on Amazon Web Services, a service provided by Amazon Web Services, Inc. The company is based in the USA.

The parent company Amazon.com, Inc. is certified under the EU-US Privacy Shield and AWS is included in this certification. AWS adheres to the CISPE Data Protection Code of Conduct. CIPSE is an association of providers of cloud infrastructure (also known as "Infrastructure-as-a-Service"). These offer customers in Europe cloud services. With the CISPE Code of Conduct, customers can ensure that their cloud infrastructure provider meets the necessary data protection standards to protect their data in accordance with the General Data Protection Regulation.

You can find more information about the handling of your data in the data protection declaration of Amazon.com, Inc .: https://www.amazon.com/gp/help/customer/display.html?nodeId=468496 Essential information has been added to facilitate reading comprehension in translated into German: https://aws.amazon.com/de/privacy/?nc1=f_pr

Amazon Web Services, Inc.
410 Terry Avenue North
Seattle WA 98109
United States

14. Rights of the data subject
Right to information, correction, revocation, complaint, deletion and blocking.

- You have the right to request information about whether and which personal data are processed by us. You also have the right to request that your personal data be corrected or completed.
- Under certain circumstances, you have the right to request that your personal data be deleted.
- Under certain circumstances, you have the right to request that the processing of your personal data be restricted.
- You can revoke your consent to the processing and use of your data in full or in part at any time with effect for the future.
- You have the right to receive your personal data in a common, structured and machine-readable format.
- You can also contact our data protection officer in writing with questions, comments and complaints, as well as requests for information in connection with our declaration on data protection and the processing of your personal data.
- You also have the right to lodge a complaint with the competent supervisory authority if you are of the opinion that the processing of your personal data violates the legal provisions.

15. Contact options
You can reach us in the following ways:

bookingkit GmbH
Abteilung Datenschutz
Sonnenallee 223
12059 Berlin

datenschutz@bookingkit.de

16. Requirement or obligation to provide data

Unless expressly stated in the survey, the provision of data is not necessary or mandatory.

17. Status of this data protection declaration

24.05.2018

We reserve the right to change this data protection declaration at any time with effect for the future.